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at the same time it preserves the image details. The performance of the 


Intentional attacks 
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1. INTRODUCTION 

Nowadays, transferring medical images between medical centers is necessary for exchanging 
knowledge and experiences. It also makes patient follow up by different centers while moving is possible. 
Moreover, it helps for continuing patient research studies even if the patient moves to a new different medical 
center [1]. As a result of the rapid development in the field of image processing and the high ability to change 
some of the information is only discovered by specialists. There was a need to encrypt the medical information 
sent to be preserved [2-4]. 

When sending the medical images between the medical centers, the main priority is to protect the 
patient information from unauthorized manipulation. Therefore, electronic medical centers give high priority 
to the transfer of images of the patient safely [5, 6]. 

Digital watermarking is considered as one of the best solutions of the above issue. By inserting special 
information, called a watermark, watermarking can enhance the security of medical images. The medical image 
is divided into two main parts. The first part is the Region of Interest (ROI) which contains the detailed 
information of the patient and any bit distortion of this part will lead to undesirable treatment for patient. The 
second part is the Region of Non-Interest (RONI) which can be used in the Watermarking processing. As a 
result of this division the watermark processing has two main steps one of them extracts the ROI from the 
medical image and the other applies the watermarking on RONI. Segmentation is the first step used to avoid 
the distortion in the ROI [7and 8]. The watermarking techniques are classified into two different domains. 
The spatial-domain watermark insertion, it is easy and to simple implement, but it is not efficient against 
various noise and attacks. The other one is the transform domain; it is efficient and more robust against attacks. 
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In Jing Liu.2019 [9], based on the DICWT-DCT and a henon Map anew, robust, multi-watermarking 
algorithm for medical images is proposed, which combines the transform domains perception of the low 
frequency coefficient invariance, the zero-watermarking concept and the encryption technology.it reduces the 
complexity of the algorithm and increases the watermark’s capacity to embed medical images by using a robust 
multi-watermark. 

In Emad Nabil et al. 2016 [10], enhanced the variation of the Flower Pollination Algorithm (FPA). It 
combines the Clonal Selection Algorithm (CSA) and the standard FPA and tried the new calculation by 
applying it to 23 improvement benchmark issues. 

In T. Avudaiappan [11], the dual encryption procedure such as signcryption algorithms and blowfish 
are used to implement the security model for medical images. In the encryption process, using OFP based 
signcryption technique the Public key and the private key are optimized. 

In Aleš Ro ek [12], proposed a method that combines three fundamental approaches RONI, Zero 
Reversible watermarking. By water marking It succeed to secure the medical image without any changes in 
the patient medical information. 

In Abhilasha Sharma.2015 [13], based on DWT and DCT to embed multiple watermarks into the 
cover image a water marking algorithm is proposed. To secure the medical information, the method used 
multiple watermarking in the form of image and text. The medical image is taken as cover image, the less 
robust logo image is embedded to the ROI region and the more robust and confidential EPR data is embedded 
into NROI region and of the cover image. In addition, the RSA method 1s used to encrypt the EPR data before 
embedding it into the cover. 

To deal with this issue, an algorithm is proposed to product a secret code is called Originality Identifier 
Code (OIC) has a dynamic property and embed in the digital images with manner that is not noticeable and at 
the same time distributed on every pixel of the digital image. The proposed algorithm is divided into two 
phases: Creation phase which the digital object is prepared to be original protected and then study the Image 
Quality based on assessment metrics. 


2. PROPOSED METHODOLOGY 

In this method, an image is decomposed into three components using Color Filter array (CFA). One 
of these components is elected for further processing. This elected component is encrypted using a dynamic 
keys approach. These dynamic keys combine the patient ID, the name and the arrival date. After the encryption 
is carried out, the new component is called a modified comment. Next a substitution processing is performed 
in the frequency domain between one of the other CFA outputs and the modified component to get the final 
encrypted component. In the last stage, the demos icing algorithm is performed on the final encrypted 
component and the other two CFA outputs. This has been done in order to get an image that includes our 
proposed Originality Identifier Code (OIC). For illustration, the whole structure of the proposed algorithm is 
shown in Figure 1. 

For medical images there are three main categories of watermarking algorithms, based on RONI [14- 
19], based on classical conventional digital watermarking [20-24] and based on reversible watermarking [25- 
28]. For the algorithm based on the first and second categories, the watermarking strategies degrade the image 
quality themselves. For the third category, although the ability of these algorithms to retrieve the images 
without distortion but they are not efficient. 

There are two main categories of attacks, the Conventional Attacks that include the Gaussian Noise 
Attacks, the JPEG Attacks [29-30 and 31] and the Median Filter Attacks. And the Geometrical Attacks that 
include the rotation, the scaling, the translation and the Cropping Attacks. The main target of the traditional 
algorithms is how to restore the original image. But the proposed algorithm checks whether the patient's 
information has been deliberately changed or not. Figure 2 demonstrates the proposed algorithm that detects 
the attacks 

Starting with the input color image I has a n * m dimension as a RGB image with JPEG format. 
Where, it represented as a: 

Le. 2 ain 
I = (irc) = | ", | (1) 


In, =- Inm 
The represented matrix of input RGB image at (1) is composed from three matrixes have the same 


number of rows and columns of the input images. The first matrix is the Red component, the second matrix is 
the Green component and the third matrix is the Blue component as shown in (2). 
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Ri ses Rim 
R=(Rrc) =] : ‘ 
Rn, =- Rnm 
Gi ex Gim 
G= (Gro) =| : i : 
Gn; + Gnm 
Bi “ee Bim 
B=(Brc)=| : i : (2) 
Bn, =- Bnm 


Then for every pixel, there are athree numeric values in terms of Red, Green and Blue component as 
shown in (3). 


(Irc) = {(Rrc), (Grc), (Brc)} (3) 














Samples of Organs Human (RGB images) Patient ID ,Clinic ,Date . 


























Mosaic processing: using Color Filter Array (Red, Green and Blue) 


























Integrity Protection: 
Resizing Processing for each R,G and B Components Using SHA-160 
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Selection Stage: Determine Modifier and Modified Elements from 
primary R, G and B Components 
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Steganography Processing: By substitution Techniques 





























































































































Transform Stage: To Space domain by using IDCT 









































Demosaica Processing: Concatenate Final Modified with original Components 


























Output RGB Image With Digital Watermarking 











Figure 1. Proposed approaches of embedding digital watermarking into medical images. 


The (4) shows the separation of the input image I to the three components. 


R = I — (G + B) 
G=1-— (R+B) 
B=I—-(R+G) (4) 


Resize the separated Red, Green and Blue components to be suitable to the encryption algorithm. 
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RM(r) =R (r + (8 — (r MOD 8))) ,if remender of numeric value for input rows + 0 


else, RM(r) = R(r) (5) 
RM(c) =R (c + (8 — (c MOD 8))) , if remender of numeric value for input colum + 0 
else, RM(c) = R(c) (6) 


The numerical intensity of the component depends on the used bits according to: 
(Rrc) = 2—1 (7) 


Where L: is the length of used bits, if L = 8 then the bits will be from O to 7. That mean the representation of 
pixels have intensities level from O (black) to 255 (white). And it is formatted as a depicted in (8). 


(Rrc)10 = (Rrc)2 = [b7 J De, Ds, ba, bz, bz, bı, bo] (8) 
Where b: is the bit value (0 or 1). 


The transformation function as a Discrete Cosine Transform is used, so (9) for each 8*8 block 
as following: 


RM (u, v) = (S> ERa Le R(t, c) (cos (E5) cos (#5) (9) 
Where 
u is raw number in the transformed data 
V is column number in the transformed data 
r is raw number in the original data 
c is column number in the original data 
m is number of rows in the original data 
n is number of columns in the original data 
RM is value of pixel in the transformed data 
RM is value of pixel in the original data. 
RM‘? «-» RM*m 
RM’ = (Ruv) = s (10) 
RMn* -+ RMnm 








To get the initial Key for the Symmetric Encryption Algorithm one of the crypto- graphic hash function on ID 
of capture device (Camera ID, as an example Serial number of capture device) as a SHA-1 is used to. 

Performing the secure hash function on Capture ID by SHA-160, the output block size has 160 bit 
(Message Digest Length = 160). With initial input Key was “acef’ and initial hash value were: 


H [0] ='67452301', 
H [1] ="EFCDAB89", 
H [2] ="98BADCFFE', 
H [3] ='10325476', 
H [4] ='C3D2E1F0, 


Accordingly to (11), then the output will be: 

K1 = SHA — 1 (Camera ID) = 86E152C142DB1256FC1EF004ADEB7B935741D94D (11) 
The first sixteen digits from the output is extracted to be the Initial key for encryption processing by AES-128 
as shown in (12). 


The Key K = '86E152C142DB1256' and CB are representing a ciphered blue component of original 
color image with forty-four internal key and 80 round according to (12). 


(12) 


CB! «. CB!m 
CBrc = AES — 128([K], (BMrc)) = s : 


CBn! >- CBnm 
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The steganography processing 1s started to get final modified component NRM in equation (13). 


NRM41 oes NRMim 


CBi4 oe CB,;m 
NRM = (NRMrc © CBrc) = co | 





i (13) 
NRMn, = NRMnm CBn,; °°: ki 

The Discrete Cosine Transform substitution processing is performed on frequency domain between 
the element matrix of the ciphered blue and the red component and then the inverse transformation method is 
used to get the final modified component in the space domain. 

The element number (1, 1) at every 8*8 block from the transformed red component is replaced by the 
same element of transformed ciphered blue component to get the final modified component at frequency 
domain then perform the inverse transform to get it at space domain. 

At the end the modified red component is appeared according to (14). 


CB + RMig 


NRM = (Ruv) = (14) 








RMg1ı wane RMge 


First AC coefficient, the element number (1, 2) at every 8*8 block from the transformed red 
component is replaced by the same element of transformed ciphered of the blue component to get the final 
modified component at frequency domain then perform the inverse transform to get it at the space domain, 
where the element (1, 2) of CB’ and other 64 coefficients for RM’. 

Middle AC coefficient, the element number (3, 6) at every 8*8 block from the transformed red 
component is replaced by the same element of the transformed ciphered of the blue component to get the final 
modified component at frequency domain then perform the inverse transform to get it at the space domain, 
where the element (3, 6) of CB’ and other 64 coefficients for RM’. 

Last AC coefficient, the element number (8, 8) at every 8*8 block from the transformed red 
component is replaced by the same element of the transformed ciphered of the blue component to get the final 
modified component at frequency domain then perform the inverse transform to get it at the space domain, 
where the element (8, 8) of CB’ and other 64 coefficients for RM’. 

At the end the modified red component will be according to the (15). 


RMii + RMig 


NRM = (RMuv) = (15) 








RMg1ı et CBgg 


The final modified component is concatenated with the two other original components “Modified Red, Green 
and Blue” accordingly to (16), where NI is protected originality image. 


(NIrc) = {(NRMrc), (GMrc), (BMrc)} (16) 
There are two main classes to assist the image distortion one of them the mathematically class which includes 
MSE. MAE and PSNR and the other class is the human visual system. 


The Mean Absolute Error and the Mean Square Error (MSE) are used to calculate the difference 
between the original image and the sent one. 


MSE = —« DP KG, j) — vay (17) 
MAE = ŻE}; [xi — vil (18) 


The peak signal to noise ratio is used and it is used to measure the similarity between the input image and the 
image after watermarking. 


2 
PSNR = 10 log, (>>) (19) 


Beside these metrics there are some important metrics like the Universal Image Quality Index (UIQI) 
which three factors loss of correlation, luminance distortion, and contrast distortion Also The most important 
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metric is the Structural Similarity Index (SSIM) because it is not only measure the similarity between original 
image and the output image as a number but also it measures the similarity in the structure. 








Oxy 2*X *V- 2*O0x*Oy 
Q E (=) . (=~) (==) (20) 
== (2*0xy+C2) 
SSIM(X, V) = (2 *X *v+c1) * avi olnst20 79) (21) 
Received Organs Human (RGB images) Patient ID ,Clinic ,Date . 























Separation processing: Separate Input image to Primary matrices 
(Red, Green and Blue) 





























Integrity Protection: 
Resizing Processing for each R,G and B Components Using SHA-160 
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Encryption Processing: Using 
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Transform Stage: To Frequency domain by spread 
spectrum Tech. using DCT 
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Steganography Processing: By substitution Techniques 























Transform Stage: To Space domain by using IDCT 
































Extract Originality Identifier Code Calculate Originality Identifier Code 























Check if correlation between 


= xtracted and Calculated “OIC” 
The Received Image is 


o) 


N iginal W 
ot Origina > 


The Received Image is Original 


















































Proposed Approach for Forgery Detection of Medical images 





Figure 2. Proposed approch for forgery detection of medical images 


3. RESULT AND ANALYSIS 

In the experiment, MATLAB 2015 Version 8.5.0.197613, core 13 processor 2.3 Ghz and 4GB RAM 
is used as the test platform. In figure [2, 3, 4,5, 6 and 7] randomly selected medical images are used as an 
original image. PSNR, MAE, MSE, SSIM and UIQI are used to measure the performance of the 
proposed algorithm. 
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AA image without digital AA image with digital AA image with digital AA image with digital 
watermarks watermarks by DC watermarks by LAC watermarks by FAC 


Figure 2. Digital watermarking using different strategy for the AA image 


AB image without AB image without AB image without AB image without AB image without 
digital watermarks digital watermarks by digital watermarks by digital watermarks by digital watermarks by 
DC LAC FAC MAC 


Figure 3. Digital watermarking using different strategy for the AB image 


AC image without AC image without AC image without AC image without AC image without 
digital watermarks digital watermarks by digital watermarks by digital watermarks by digital watermarks by 
LAC FAC MAC 


Figure 4. Digital watermarking using different strategy for the AC image 


Flu image without Flu image without Flu image without Flu image without Flu image without 
digital watermarks digital watermarks by digital watermarks by digital watermarks by digital watermarks by 
DC LAC FAC MAC 


Figure 5. Digital watermarking using different strategy for the Flu image 
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MAL UNO 
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Thr image without digital Thr image without Thr image without Thr image without Thr image without 
watermarks digital watermarks by digital watermarks by digital watermarks by digital watermarks by 
DC LAC FAC MAC 


Figure 6. Digital watermarking using different strategy for the Thr image 





Gastro image without Gastro image Gastro image without Gastro image without Gastro image without 
digital watermarks without digital digital watermarks by digital watermarks by digital watermarks by 
watermarks by LAC FAC MAC 
DC 


Figure 7. Digital watermarking using different strategy for the Gastro image 


Table 1 represents the Mean Absolute of the proposed approach; the results show that the mean 
absolute error of the single MAC element (3, 6) has the lowest value compared with the other elements. 
Table 2 represents the Mean absolute error of the proposed approach; the results show that the mean square 
error of the single MAC element (3, 6) has the lowest value compared with the other elements. Table 3 
represents the peak signal to noise ratio of the proposed approach; the results show that the peak signal to noise 
ratio of the single MAC element (3, 6) and single LAC element (8, 8) has the highest value compared with the 
other elements. Table 4 represents the Structural Similarity Index of the proposed approach; the results show 
that the Structural Similarity Index of the single MAC element (3, 6) and single FAC element (1,2) has the 
highest value compared with the other elements. Table 5 represents the Entropy the proposed approach; the 
results show that the Entropy of the single MAC element (3, 6), the single LAC element (8, 8) and FAC element 
(1,2) has the highest value compared with the DC element (1,2). 

From analyzing these results, it is clear that the choosing of single MAC element (3, 6) gave the best 
performance over the rest of elements. 

The vulnerability assessment approach is based on assuming an attack on one of the quadrants zones. 
In this approach, the technique should show full immunity against space attacks, whereas the image could be 
changed in any of the areas explained. Moreover, the assessment technique shall include as well the color 
component changes since the algorithm is based on manipulation based on color components. In this approach, 
and as explained in figure 8, the attack takes place either using a single-color basic component (Red, Green or 
Blue) or a natural color change (i.e. a mix of basic color components). Figures [9-13] demonstrate a different 
attack region and all of them are detected the proposed algorithm. 


Tablel. Mean absolute error of the proposed approach 


Images/Size/ JPEG Mean Absolute Error of the Proposed Approach 
Single-DC" Element Single-FAC" Single-MAC" Element Single-LAC" 
(1,1) Element (1,2) (3,6) Element (8,8) 
Thr/472*499, 21.9KB 12.7863 1.1034 0.688 1.2792 
AA/459*442, 21.9KB 16.2208 1.0384 0.8731 1.2973 
AB/512*512, 22KB 6.624 1.0451 0.8251 0.9707 
AC/512*512, 340KB 1.3006 1.1556 0.9568 0.9888 
Flu/348*288, 26KB 3.7528 1.0867 0.8294 0.8301 
Gastro/640*480, 47.1KB 9.8801 1.0979 0.6837 1.179 
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Table 2. Mean square error of the proposed approach 


Mean Square Error for the Proposed Approach 
Single-DC" Element Single-FAC" Element Single-MAC" Element Single-LAC" 


Images/Size/ JPEG 


(1,1) (1,2) (3,6) Element (8,8) 
Thr/472*499, 21.9KB 2620.141746 52.14900149 18.58216191 35.56916981 
AA/459*442, 21.9KB 1.29E+03 32.31012674 23.24093833 34.13997717 
AB/512*512, 22KB 1.71E+03 32.49317678 23.22633489 29.98714193 
AC/512*512, 340KB 1.60E+03 38.49172719 27.13516998 28.04392751 
Flu/348*288, 26KB 3.09E+03 34.58821313 22.86935161 23.10755148 
Gastro/640*480, 47.1KB 2620.141746 52.14900149 18.58216191 35.56916981 


Table 3. The peak signal to noise ratio of the proposed approach 


Images/Size/ JPEG Peak signal to noise ratio of the Proposed Approach 
Single-DC" Element Single-FAC" Element Single-MAC" Element Single-LAC" 
(1,1) (1,2) (3,6) Element (8,8) 
Thr/472*499, 21.9KB 13.94755574 30.95834364 35.43984121 35.43984121 
AA/459*442, 21.9KB 17.03133888 33.03741699 34.46826703 34.46826703 
AB/512*512, 22KB 15.8030363 33.01288188 34.47099677 34.47099677 
AC/512*512, 340KB 16.07762777 32.27712962 33.79547814 33.79547814 
Flu/348*288, 26KB 13.22697662 32.74152234 34.53826509 34.53826509 
Gastro/640*480, 47.1KB 13.69968559 31.38404996 35.46141742 35.46141742 
Table 4. SSIM for the proposed approach 
Images/Size/ JPEG SSIM of the Proposed Approach 
Single-DC" Element Single-FAC" Element Single-MAC" Element Single-LAC" 
(1,1) (1,2) (3,6) Element (8,8) 
Thr/472*499, 21.9KB 0.082951481 0.895439976 0.91813494 0.77977623 
AA/459*442, 21.9KB 0.54000848 1 0.98 1986299 0.962351614 0.852759314 
AB/512*512, 22KB 0.582614558 0.965833202 0.978976003 0.939601317 
AC/512*512, 340KB 0.732765203 0.988080269 0.992311745 0.977517881 
Flu/348*288, 26KB 0.4468566 0.976415496 0.988063836 0.989174577 
Gastro/640*480, 47.1KB 0.51259705 0.976415496 0.983385471 0.867343767 


Images/Size/ JPEG 


Thr/472*499, 21.9KB 
AA/459*442, 21.9KB 
AB/512*512, 22KB 
AC/512*512, 340KB 
Flu/348*288, 26KB 
Gastro/640*480, 47.1KB 


Table 5. UIQI for the proposed approach 
UIQI for the Proposed Approach 


Single-DC" Element 


C1) 
0.491369955 
0.597094119 
0.314558158 
0.364645 802 
0.153009019 
0.343672644 


Single-FAC" Element 


(1,2) 
0.99 1868044 
0.981986299 
0.990700629 
0.974713458 
0.989964331 
0.992011314 


Single-MAC" Element 


(3,6) 
0.997112971 
0.98718123 
0.993380475 
0.982441549 
0.993385972 
0.996884846 





Single-LAC" 
Element (8,8) 
0.994662007 
0.981198615 
0.99140284 
0.98 155607 
0.99331525 
0.994923823 


Figure 8. Infected component and locations of active attack for received RGB images. 
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Figure 9. (a) AB modified at red the by same blue component from raw 238 - 241 and column 300 — 303, 
(b) modified at red the by same blue component from raw 238 - 241 and column 300 - 303 


= 
(a) 





" 
(b) 


Figure 10. (a) AC modified at blue by 255 from raw 238 - 241 and column 300 — 303, (b) AC modified at 


blue by the same of green component from raw 238 - 241 and column 300 — 303 


(a) ” 


Figure 11. (a) Flu modified at blue by green component at row from 138 - 141 and column 200 — 203, 
(b) Flu modified at red by the same blue component at row from 238 - 241 and column 300 - 303 


(a) (b) 


Figure 12. (a) Gastro modified at red component, (b) Gastro modified at red component by 255 in raw 238 
to 241 and column 300 to 303 
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HAL URO 





(b) 


Figure 13. (a) Thr modified at blue by green component at row from 138 - 141 and column 200 — 203, 
(b) Thr modified at blue component by 255 at row from 238 - 241 and column 200 - 203 


4. CONCLUSION 

This paper has proposed a new watermarking algorithm for medical images called Originality 
Identifier Code (OIC). The advantages of this code are that it has dynamic properties not fixed one for all 
images. It is also embedded in the digital images with the manner that is not noticeable while it is distributed 
on every pixel of the whole digital image. The power of the proposed algorithm arises from the fact that the 
encryption is distributed overall the entire image not only over the region of noninterest (RONI). At the same 
time, it preserves the features of the original images, which offers high protection for the patient privacy. The 
performance of the proposed algorithm has been evaluated using different performance measures. The Mean 
Square Error (MSE) of single MAC element (3, 6) gave the smallest value over all the other elements. The 
Mean Absolute Error (MAE) of single MAC element (3, 6) gave the smallest value over all the other elements. 
The Peak Signal to Noise Ratio (PSNR) of single MAC element (3, 6) gave the highest value over all the other 
elements. The Universal Image Quality Index (UIQI) of single MAC element (3, 6) gave the highest correlation 
value over all the other elements. the Structural Similarity Index (SSIM) of single MAC element (3, 6) shows 
that the high similarity between the original image and the encrypted one. From these reading it is clear that 
the choosing of single MAC element (3, 6) gave the best performance over the rest of elements. The proposed 
algorithm has a robust performance in detecting the intentional attacks that change the patient's diagnosis. And 
at the same time a high efficiency to restore the original image unlike most of the existing algorithms. 
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